Chapter 14: Athena

Question 1

How to use MFA-delete?

Answer 1

Must enable versioning on s3 bucket beforehand

Question 2

when is MFA delete required?

Answer 2

• permanently delete an obj version

- suspend versioning on the bucket

Question 3

who can enable/disable MFA-delete?

Answer 3

bucket owner

Question 4

How to enforce encryption on s3 bucket

Answer 4

• use default encryption option for s3 bucket

- use a bucket policy and refuse any API call to put an s3 object without headers

Question 5

rules for setting logging bucket

Answer 5

do not set your logging bucket to be the monitored bucket. it will create a logging loop, and your bucket will grow in size

Question 6

Types of S3 replication

Answer 6

1. cross region replication (CRR)

2. same region replication (SRR)

Question 7

What must be set prior to s3 replication

Answer 7

1. must enable versioning in source and destination

2. must give proper IAM permissions to s3

Question 8

CRR use case

Answer 8

compliance, lower latency access, replication across accounts

Question 9

SRR use case

Answer 9

logs, aggregation, live replication between production and test accounts

Question 10

Which objects are replicated after s3 replication is enabled

Answer 10

only new objects are replicated

Question 11

What happens when a user is given a pre-signed url?

Answer 11

user inherits the permissions of the person who generated the url for get/put

Question 12

what are the s3 storage classes

Answer 12

1. standard - general purpose
2. standard - IA
3. one zone infrequent access
4. intelligent tiering
5. glacier
6. glacier deep archive

Question 13

Describe the standard/general purpose s3 storage class

Answer 13

• high durability of objects across multiple az
• sustain 2 concurrent facility failures
• use case: big data analytics, mobile and gaming apps, content distribution

Question 14

describe the standard IA s3 storage class

Answer 14

• for when data is less accessed but rapid access is required
• high durability across multiple az
• low cost compared to s3 standard
• sustain 2 concurrent facility failures
• use cases: as a data store for disaster recovery back-ups

Question 15

describe one-zone IA s3 storage class

Answer 15

• same as IA but one zone
• low latency and high throughput performance
• support SSL for data at transit + encryption at rest
• lower cost than IA
• use case: secondary backup, or data you can recreate

Question 16

describe s3 intelligent tiering s3 storage class

Answer 16

• same low latency + high throughput performance of s3 standard
• small monthly monitoring fee
• automatically moves obj b/w tiers
• multiple az
• resilient against events taht impact an az

Question 17

describe glacier s3 storage class

Answer 17

• low cost obj storage meant for archiving/backup
• data is retaiend for the longer term
• alternative to on-premise magnetic tape storage
• cost per month + retrieval cost
• each item in glacier is called “archive”
• archive are stored in vaults

Question 18

What are the retrieval options for Amazon Glacier

Answer 18

1. expediated
2. standard ( 3 to 5 hours)
3. bulk (5 to 12 hours)

** min storage of 90 days

Question 19

What are the retrieval options for Amazon Deep Glacier

Answer 19

1. Standard (12 hours)
2. Bulk (48 hours)

** min storage duration of 180 days

Question 20

How can S3 be moved between storage classes

Answer 20

• moving obj can be automated using a lifecycle config

Question 21

What are the s3 lifecycle rules

Answer 21

• transition action: it defines when objects move to another storage class
• expiration actions: when objects should de deleted
• rules can be created for a creation prefix or obj tags

Question 22

s3 select and glacier select

Answer 22

• retrieve less data using sql by performing server side filtering
• can filter by rows and columns
• less network transfer, less cpu cost client-side

Question 23

what is s3 requester pay

Answer 23

the requester instead of the s3 bucket owner pays the cost of the request and the data download from the bucket

Question 24

what is amazon athena

Answer 24

a server less query service to perform analytics against s3 objects

Question 25

s3 object lock

Answer 25

• worm model
• block obj version deletion for an amt of time
• obj retention : retention period; legal hold
• mode: governance and compliance